| A signal analysis of network traffic anomalies P Barford, J Kline, D Plonka, A Ron Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment, 71-82, 2002 | 1301 | 2002 |
| Characteristics of network traffic flow anomalies P Barford, D Plonka Proceedings of the 1st ACM SIGCOMM Workshop on Internet Measurement, 69-73, 2001 | 426 | 2001 |
| FlowScan: A Network Traffic Flow Reporting and Visualization Tool. D Plonka LISA 305, 317, 2000 | 293 | 2000 |
| On the design and use of internet sinks for network abuse monitoring V Yegneswaran, P Barford, D Plonka Recent Advances in Intrusion Detection: 7th International Symposium, RAID …, 2004 | 268 | 2004 |
| Scalable monitor of malicious network traffic VT Yegneswaran, PR Barford, DJ Plonka US Patent 8,015,605, 2011 | 103 | 2011 |
| Context-aware clustering of DNS query traffic D Plonka, P Barford Proceedings of the 8th ACM SIGCOMM conference on Internet Measurement, 217-230, 2008 | 92 | 2008 |
| Entropy/ip: Uncovering structure in ipv6 addresses P Foremski, D Plonka, A Berger Proceedings of the 2016 Internet Measurement Conference, 167-181, 2016 | 69 | 2016 |
| Temporal and spatial classification of active IPv6 addresses D Plonka, A Berger Proceedings of the 2015 Internet Measurement Conference, 509-522, 2015 | 61 | 2015 |
| In the IP of the beholder: Strategies for active IPv6 topology discovery R Beverly, R Durairajan, D Plonka, JP Rohrer Proceedings of the Internet Measurement Conference 2018, 308-321, 2018 | 60 | 2018 |
| Beyond counting: new perspectives on the active IPv4 address space P Richter, G Smaragdakis, D Plonka, A Berger Proceedings of the 2016 Internet Measurement Conference, 135-149, 2016 | 50 | 2016 |
| Flexible traffic and host profiling via DNS rendezvous D Plonka, P Barford Workshop Satin, 2011 | 40 | 2011 |
| Traffic anomaly detection at fine time scales with bayes nets J Kline, S Nam, P Barford, D Plonka, A Ron 2008 The Third International Conference on Internet Monitoring and …, 2008 | 33 | 2008 |
| Method and apparatus for network anomaly detection PR Barford, JT Kline, S Nam, DJ Plonka, A Ron US Patent 9,680,693, 2017 | 32 | 2017 |
| Method and apparatus for network anomaly detection PR Barford, JT Kline, S Nam, DJ Plonka, A Ron US Patent 9,680,693, 2017 | 32 | 2017 |
| Method and apparatus for network anomaly detection PR Barford, JT Kline, S Nam, DJ Plonka, A Ron US Patent 9,680,693, 2017 | 32 | 2017 |
| Assessing performance of Internet services on IPv6 D Plonka, P Barford 2013 IEEE Symposium on Computers and Communications (ISCC), 000820-000826, 2013 | 23 | 2013 |
| Flawed routers flood university of wisconsin internet time server D Plonka NANOG 29, Oct. 2003, 2003 | 23 | 2003 |
| Network anomaly confirmation, diagnosis and remediation D Plonka, P Barford 2009 47th Annual Allerton Conference on Communication, Control, and …, 2009 | 22 | 2009 |
| KIP: A measured approach to IPv6 address anonymization D Plonka, A Berger arXiv preprint arXiv:1707.03900, 2017 | 19 | 2017 |
| An Analysis of Network Configuration Artifacts. D Plonka, AJ Tack LISA, 79-91, 2009 | 17 | 2009 |
Paul BarfordProfessor of Computer Science, University of Wisconsin - MadisonVerified email at cs.wisc.edu
